如何在WinXP设备驱动程序中根据线程ID获取线程句柄?

2025年05月07日 19:01
有1个网友回答
网友(1):

HANDLE hThreadId = XXXXX;
PVOID pEThread = NULL;
HANDLE hThread = NULL;
PsLookupThreadByThreadId( ThreadId, &pEThread );
ObOpenObjectByPointer( pEThread, OBJ_KERNEL_HANDLE, NULL, NULL, **PsThreadType, KernelMode, &hThread );
ObDereferenceObject( pEThread );